Real-time TCP/UDP conversation analyzer for Windows with automatic country flags for every IP address.
A powerful yet lightweight desktop tool to monitor active network flows, see exactly who you're talking to (by country), and analyze traffic in real time.
- Real-time packet capture using Scapy + Npcap
- Live conversation tracking (TCP & UDP flows)
- Country flags + GeoIP for every IP (using MaxMind GeoLite2)
- Modern dark UI with CustomTkinter
- Active flows table with packets, bytes, and last seen
- Unique endpoints view
- BPF filter support
- Works offline after GeoIP database setup
- Install Npcap from https://npcap.com/
pip install -r requirements.txt- Download GeoLite2-Country.mmdb (free from MaxMind) and place it next to main.py
- Run as Administrator
See full instructions in the code comments and future wiki.
This is an MVP focused on core functionality. Iterative improvements welcome.